Privacy Policy

ASISTORIA is a software company providing RECLAIM and related business software services for restaurants and businesses.

For personal data collected through asistoria.co.uk, client accounts, enquiries, subscriptions and support channels, ASISTORIA is generally the controller. Where we process data on behalf of a restaurant client for that client's own restaurant platform, the client may be the controller and ASISTORIA may act as processor under the relevant agreement.

Account information: name, email address, password authentication data, restaurant name, phone number, website, role and profile details.

Enquiry information: details submitted through Build My Restaurant, contact, support and feature request forms.

Billing information: Stripe customer identifiers, subscription status, checkout references, payment status and invoice information. ASISTORIA does not store full card numbers.

Restaurant setup information: menus, opening hours, delivery settings, branding assets, images, domain information, staff onboarding information and launch notes supplied by clients.

Technical information: device, browser, IP address, pages visited, security logs, authentication events and similar information needed to operate and protect the service.

Communications: emails, support messages, feature requests, notes and other correspondence with ASISTORIA.

To respond to enquiries and Build My Restaurant requests.

To create and verify accounts, provide login, password reset and account security.

To provide RECLAIM, client portal features, onboarding, support, feature requests, subscriptions and billing.

To send transactional emails through Resend, including confirmations, verification emails, support replies and service updates.

To process payments and subscription management through Stripe.

To maintain security, prevent misuse, troubleshoot issues and improve service reliability.

To comply with legal, tax, accounting, contractual and regulatory obligations.

We use personal data where it is needed to perform a contract or take steps before entering into a contract, for example account creation, onboarding, subscriptions and support.

We use personal data where we have a legitimate interest, for example responding to business enquiries, improving services, securing the platform and maintaining business records.

We use personal data where required by law, including tax, accounting, fraud prevention and legal compliance.

Where we rely on consent, such as optional marketing communications if introduced, you can withdraw consent at any time.

We use trusted service providers to run ASISTORIA, including Stripe for payments, Resend for email delivery, database and hosting providers for application storage and deployment, analytics or monitoring providers where used, and professional advisers where necessary.

We only share information with providers where needed to provide, secure, support or improve the service, or where required by law.

ASISTORIA may use essential cookies or similar technologies for authentication, security, preferences and service operation.

If optional analytics or marketing cookies are introduced, the website should provide appropriate notice and controls where required.

Some providers may process data outside the UK. Where this happens, we expect appropriate safeguards to be used, such as adequacy regulations, standard contractual clauses or equivalent lawful transfer mechanisms.

We keep personal data only for as long as reasonably needed for the purposes described in this policy.

Account and subscription records are kept while the account is active and for a reasonable period afterwards for billing, security, legal, tax, dispute and operational reasons.

Enquiries and support messages may be kept to manage follow-up, improve service and maintain a record of client communications.

Some records may be retained longer where required by law or where needed to establish, exercise or defend legal claims.

We use reasonable technical and organisational measures to protect personal data, including access controls, password authentication, secure service providers and operational monitoring.

No internet service can be guaranteed completely secure. Clients should keep account credentials confidential and contact us immediately if they believe an account has been compromised.

Depending on the circumstances, you may have rights to access, correct, delete, restrict, object to or receive a copy of your personal data.

You may also have the right to withdraw consent where processing is based on consent.

To exercise privacy rights, contact admin@asistoria.co.uk. We may need to verify your identity before responding.

RECLAIM may support restaurant customer ordering, accounts, payments, order history, delivery tracking and related operational data on client restaurant platforms.

Where that data belongs to a restaurant client's own platform, ASISTORIA processes it only as needed to provide, secure and support the agreed service, unless otherwise agreed or required by law.

If you have a privacy concern, please contact ASISTORIA first so we can try to resolve it.

You also have the right to complain to the UK Information Commissioner's Office if you are unhappy with how your personal data is handled.

We may update this Privacy Policy as ASISTORIA, RECLAIM, legal requirements or service providers change. The latest version will be published on this page.